You last visited: Today at 12:39
Advertisement
[Source] PacketHack
Discussion on [Source] PacketHack within the Kal Hacks, Bots, Cheats & Exploits forum part of the Kal Online category.
10/06/2008, 21:06
#1
elite*gold: 0
Join Date: Oct 2006
Posts: 225
Received Thanks: 207
[Source] PacketHack
=================================
KalOnline PacketHack
Public Version 1.0
FOR PSERVER ONLY!!
=================================
Based on KalHack11 by BakaBug
Modified by ZeroTen
Greetings to Bloodx, Syntex
=================================
I decided to release my PacketHack source [No, this isn't the source from Bloodx or other people, everyone programmed it on his own]
because I'm not interessted in Kal anymore, but maybe someone will continue my work.
I added a few comments in the source but the most should be clear.
I used Visual C++ 2005 from Microsoft to compile it, if your program doesn't work then try this.
If you use the source for a Hack, I recommend to be mentioned and I would like to see your work
I won't help you if you got problems, and I don't care if it is well programmed or not.
Btw: I like thanks
EDIT: DOWNLOAD NEW VERSION, COMMANDS WILL WORK!!
Attached Files
PacketHack.rar
(11.8 KB, 6827 views)
10/06/2008, 21:14
#2
elite*gold: 60
Join Date: Jan 2008
Posts: 193
Received Thanks: 21
gonna try it
im nub at programming lol
10/06/2008, 21:54
#3
elite*gold: 0
Join Date: Oct 2005
Posts: 112
Received Thanks: 23
cant debug :S
1>------ Build started: Project: KalSendHack, Configuration: Debug Win32 ------
1>Compiling...
1>main.cpp
1>.\main.cpp(12) : fatal error C1083: Cannot open include file: 'windows.h': No such file or directory
1>Build log was saved at "file://c:\Documents and Settings\User-A\Desktop\PacketHack\KalSendHack\Debug\BuildLog.ht m"
1>KalSendHack - 1 error(s), 0 warning(s)
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========
can any 1 help?
usin Visual c++ 2005
10/06/2008, 22:01
#4
elite*gold: 46
Join Date: Mar 2006
Posts: 2,589
Received Thanks: 1,198
danke das du dem ganzen UNSINN einem ende machst Robin.
Endlose fragen haben jetzt wohl ein ende, werde noch PacketSort scripts pub machen und ein komplett neu geschriebenen darauf basierenden source falls leute es nicht selber schaffen.
Danke für die Greetings :]
Wir schreiben uns :P bis die tage.
10/06/2008, 22:02
#5
elite*gold: 0
Join Date: Oct 2007
Posts: 150
Received Thanks: 114
Then add the path to the libs in the options of VC++ 2005.
PS: You need original Windows to download this.
greetz Godl!ke
10/06/2008, 22:03
#6
elite*gold: 0
Join Date: Oct 2006
Posts: 225
Received Thanks: 207
Quote:
Originally Posted by
nonosocr1986
cant debug :S
1>------ Build started: Project: KalSendHack, Configuration: Debug Win32 ------
1>Compiling...
1>main.cpp
1>.\main.cpp(12) : fatal error C1083: Cannot open include file: 'windows.h': No such file or directory
1>Build log was saved at "file://c:\Documents and Settings\User-A\Desktop\PacketHack\KalSendHack\Debug\BuildLog.ht m"
1>KalSendHack - 1 error(s), 0 warning(s)
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========
can any 1 help?
usin Visual c++ 2005
WTF? How silly can people be, omg.
How about putting the windows.h in the main.cpp / main.h folder?
Or just configure VC2005 to use your SDK [
EDIT: Thx Godlike ^^
Syntex du wurscht komm msn :P
10/06/2008, 22:11
#7
elite*gold: 0
Join Date: Jul 2008
Posts: 174
Received Thanks: 17
Bei mir funktioniert das compilen...
da ich leider noch ein c++noob bin, hab ich aber keinen plan was ich damit machen kann, lol^^
10/06/2008, 22:14
#8
elite*gold: 0
Join Date: May 2008
Posts: 106
Received Thanks: 11
btw is das hackshieldbypass wirklich fürs neue oO
musst ja n emu schreiben und der slänger als die paar zeilen
10/06/2008, 22:18
#9
elite*gold: 0
Join Date: Oct 2005
Posts: 112
Received Thanks: 23
easy guys i dont even know what is going on xD ....
well if u really wanna help explain packets from A to Z
cuz u're just posting these stuff and i personally aint understanding anything xD
so if u can just explain a lil of how to use it it will be very kind ^^
thx ^^
10/06/2008, 22:19
#10
elite*gold: 0
Join Date: Oct 2006
Posts: 225
Received Thanks: 207
Quote:
Originally Posted by
Shalava
btw is das hackshieldbypass wirklich fürs neue oO
musst ja n emu schreiben und der slänger als die paar zeilen
Ist nur für Pserver, dachte das ist selbstverständlich, habs nochmal reineditiert.
10/06/2008, 22:31
#11
elite*gold: 0
Join Date: Jul 2008
Posts: 174
Received Thanks: 17
Mittlererweile bin ich schlauer, habe di dll auch shcon injected, aber wenn ich ein command in die cmd box herein schreibe, passiert nichts, außer, dass in der Box ein neuer Eintrag mit "Enter command" entsteht...
10/06/2008, 22:34
#12
elite*gold: 20
Join Date: Apr 2008
Posts: 820
Received Thanks: 177
+thanks
will nich so richtig :/
10/06/2008, 22:35
#13
elite*gold: 0
Join Date: Oct 2006
Posts: 225
Received Thanks: 207
Erst 'kocp' eingeben, dann ist PacketHack erst aktiviert, dann kannste die andern Commands eingeben, und mehr als Enter Command steht dann auch nicht in der Konsole, es soll ingame passieren hab keine erfolgreich Message erstellt weils unnötig ist ^^
EDIT: Ich schau mal drüber
EDIT2: Bei mir geht alles, ihr könnt mal probiern alle scanf_s in scanf umzuwandeln aber das das was bewirkt bezweifle ich, bei mir geht beides.
10/06/2008, 22:38
#14
elite*gold: 0
Join Date: Jul 2008
Posts: 174
Received Thanks: 17
bei mir schauts so aus wie bei chibis
10/06/2008, 22:40
#15
elite*gold: 55
Join Date: Mar 2006
Posts: 4,582
Received Thanks: 1,537
so hier dann mal mein src von dem EPVPHACKIt :P
vllt mach ich noch nen full src pub mit allen sachen oO abwarten
mirs egal macht was ihr wollt kal suckt! :]
Recv.h
PHP Code:
#include "Stuff.h" //char RecvText[]= "RECV TYPE: 0x%0.2x DATA: %s\n"; DWORD MyRecvBack = 0x004F2121 + 7 ; DWORD dancehack = 0 ; DWORD beheadehack = 0 ; DWORD flhack = 0 ; DWORD itemanzahl ; DWORD studenthack = 0 ; DWORD anihack = 0 ; DWORD aniID ; DWORD anihack1 = 0 ; DWORD aniID1 ; int i ; int WINAPI MyRecv ( char * packet ) { WORD size ; memcpy (( void *)& size ,( void *)(( DWORD ) packet ), 2 ); if ( packet [ 2 ] == 0x32 ) { DWORD id ; memcpy (( void *)& id ,( void *)(( DWORD ) packet + 3 ), 4 ); char name [ 255 ]={ 0 }; memcpy (( void *)& name ,( void *)(( DWORD ) packet + 7 ), 16 ); if ( anihack == 1 ) { int i ; for ( i = 0 ; i < 20 ; i ++) { SendDetour ( 0x2b , "bd" , aniID , id ); } } } if ( packet [ 2 ] == 0x32 ) { DWORD id ; memcpy (( void *)& id ,( void *)(( DWORD ) packet + 3 ), 4 ); char name [ 255 ]={ 0 }; memcpy (( void *)& name ,( void *)(( DWORD ) packet + 7 ), 16 ); if ( anihack1 == 1 ) { int i ; for ( i = 0 ; i < 20 ; i ++) { SendDetour ( 0x2b , "bd" , aniID1 , id ); } } } if ( packet [ 2 ] == 0x32 ) { DWORD id ; memcpy (( void *)& id ,( void *)(( DWORD ) packet + 3 ), 4 ); char name [ 255 ]={ 0 }; memcpy (( void *)& name ,( void *)(( DWORD ) packet + 7 ), 16 ); if ( flhack == 1 ) { int i ; for ( i = 0 ; i < 5 ; i ++) { SendDetour ( 0x40 , "b" , 4 ); SendDetour ( 0x5c , "bbssdwbdd" , 00 , 01 , "gl& have fun with Hacked Server :)" , name , dropID , 48 , 0 , 1 , 50000 ); } } } if ( packet [ 2 ] == 0x32 ) { DWORD id ; memcpy (( void *)& id ,( void *)(( DWORD ) packet + 3 ), 4 ); char name [ 255 ]={ 0 }; memcpy (( void *)& name ,( void *)(( DWORD ) packet + 7 ), 16 ); if ( beheadehack == 1 ) { int i ; for ( i = 0 ; i < 6 ; i ++) { SendDetour ( 0x2b , "bd" , 1 , id ); } } } if ( packet [ 2 ] == 0x32 ) { DWORD id ; memcpy (( void *)& id ,( void *)(( DWORD ) packet + 3 ), 4 ); char name [ 255 ]={ 0 }; memcpy (( void *)& name ,( void *)(( DWORD ) packet + 7 ), 16 ); if ( dancehack == 1 ) { int i ; for ( i = 0 ; i < 6 ; i ++) { SendDetour ( 0x3d , "db" , id , 14 ); } } } if ( packet [ 2 ] == 0x32 ) { DWORD id ; memcpy (( void *)& id ,( void *)(( DWORD ) packet + 3 ), 4 ); char name [ 255 ]={ 0 }; memcpy (( void *)& name ,( void *)(( DWORD ) packet + 7 ), 16 ); if ( studenthack == 1 ) { int i ; for ( i = 0 ; i < 1 ; i ++) { SendDetour ( 0x55 , "bd" , 01 , id , i + 1 ); } } } return 0 ; } int Naked MyRecvDetour () { __asm { push edx push ecx push ebx push eax mov eax , [ ebp + 0x08 ] //my packet ehh ^^ push eax call MyRecv pop eax pop ebx pop ecx pop edx mov eax , [ ebp + 0x08 ] movzx ecx , [ eax + 2 ] mov edx , MyRecvBack //0x00523272 jmp edx } }
Send.h
PHP Code:
#include "Stuff.h" DWORD MySendBack = 0x004F2010 + 6 ; DWORD dropID ; DWORD temp ; DWORD wearID ; DWORD unwearID ; DWORD useID ; DWORD sniff = 0 ; //char SendText[] = "PACKET TYPE:0x%02x FORMAT:%s\n"; int Naked SendDetour ( DWORD type , LPCSTR format ,...) { __asm { push ebp mov ebp , esp sub esp , 14h } if ( type == 0x02 ) { //(c) by ZeroTen Intercept ( INST_CALL , 0x004F203D , 0x0052E330 , 5 ); } // printf(SendText,type,format); va_list args ; va_start ( args , format ); int i ; char * something ; for ( i = 0 ; i <( signed ) strlen ( format ); i ++) { switch ( format [ i ]) { case 'U' : //??? 4bytes temp = va_arg ( args , DWORD ); // last_u=temp; // printf("%d %d \n",i+1,va_arg( args, DWORD)); break; case 'b' : //BYTE temp = va_arg ( args , BYTE ); // printf("%d %d \n",i+1,temp); break; case 'd' : //DWORD temp =( DWORD ) va_arg ( args , DWORD ); // printf(" %d: %d\n",i+1,temp); if (( i == 0 )&&( type == 0x1a )) { dropID = temp ; //printf("ItemID(Dropped): %d\n",dropID); } if( type == 0x41 ) { wearID = temp ; } if( type == 0x42 ) { unwearID = temp ; } if( type == 0x21 ) { useID = temp ; } break; case 'w' : //WORD // printf(" %d: %d\n",i+1,(WORD)va_arg( args, DWORD)); break; case 's' : //STRING something = va_arg ( args , char *); // printf(" %d: %s\n",i+1,something); break; case 'm' : //printf(" %d: %s\n",i+1,(DWORD)va_arg( args, DWORD)); break; } } va_end ( args ); __asm { jmp MySendBack ; } }
dll.cpp
PHP Code:
#include "Stuff.h" #include "Send.h" #include "Recv.h" void start ( void * pParams ) { char input [ 255 ]; while( true ) { cin >> input ; /*##########################################PIMP Commands############################*/ if ( strcmp ( input , "ebit" ) == 0 ) { SendDetour ( 0x5b , "bd" , 2 , wearID ); } if ( strcmp ( input , "revit" ) == 0 ) { for ( i = 0 ; i < 100 ; i ++) { SendDetour ( 0x5b , "bd" , 1 , wearID ); } } if ( strcmp ( input , "pimp" ) == 0 ) { for ( i = 0 ; i < 500 ; i ++) { SendDetour ( 0x39 , "dd" , useID , wearID ); Sleep ( 10 ); SendDetour ( 0x39 , "dd" , dropID , wearID ); // Tali } } /*##################################Crash Commands###################################*/ if ( strcmp ( input , "F0" ) == 0 ) { printf ( "FLHack End\n" ); flhack = 0 ; } if ( strcmp ( input , "F1" ) == 0 ) { printf ( "FLHack Started\n" ); flhack = 1 ; } if ( strcmp ( input , "crashmix" ) == 0 ) { SendDetour ( 0x62 , "bdddd" , 0 , wearID , wearID , unwearID , dropID ); } //if (strcmp(input,"crash1") == 0) // { // SendDetour(0x1d,"b",0x0e); // start(start); // } /*##################################FUN COMMANDS#####################################*/ if ( strcmp ( input , "A" ) == 0 ) { Sleep ( 100 ); printf ( "Ani ID: " ); scanf_s ( "%d" ,& aniID ); anihack = 1 ; } if ( strcmp ( input , "Animation0" ) == 0 ) { anihack = 0 ; } if ( strcmp ( input , "A1" ) == 0 ) { Sleep ( 100 ); printf ( "Ani ID: " ); scanf_s ( "%d" ,& aniID1 ); anihack1 = 1 ; } if ( strcmp ( input , "Animation0" ) == 0 ) { anihack1 = 0 ; } if ( strcmp ( input , "S1" ) == 0 ) { printf ( "StudentHack Started\n" ); studenthack = 1 ; } if ( strcmp ( input , "S0" ) == 0 ) { printf ( "StudentHack End\n" ); studenthack = 0 ; } if ( strcmp ( input , "D1" ) == 0 ) { printf ( "DanceHack Started\n" ); dancehack = 1 ; } if ( strcmp ( input , "D0" ) == 0 ) { printf ( "DanceHack End\n" ); dancehack = 0 ; } if ( strcmp ( input , "B1" ) == 0 ) { printf ( "BeheadeHack Started\n" ); beheadehack = 1 ; } if ( strcmp ( input , "B0" ) == 0 ) { printf ( "BeheadeHack End\n" ); beheadehack = 0 ; } /*##################################STORM COMMANDS###################################*/ if ( strcmp ( input , "d1r1" ) == 0 ) { for ( i = 0 ; i < 5 ; i ++) { SendDetour ( 0x10 , "bdd" , 43 , 51930 , 34494 ); SendDetour ( 0x10 , "bdd" , 43 , 51982 , 34852 ); } } if ( strcmp ( input , "d1r8" ) == 0 ) { for ( i = 0 ; i < 10 ; i ++) { SendDetour ( 0x10 , "bdd" , 43 , 50726 , 39075 ); } } if ( strcmp ( input , "d1r10" ) == 0 ) { for ( i = 0 ; i < 3 ; i ++) { SendDetour ( 0x10 , "bdd" , 43 , 50894 , 40663 ); SendDetour ( 0x10 , "bdd" , 43 , 50455 , 40685 ); SendDetour ( 0x10 , "bdd" , 43 , 50465 , 40130 ); SendDetour ( 0x10 , "bdd" , 43 , 50874 , 40150 ); SendDetour ( 0x10 , "bdd" , 43 , 50705 , 40423 ); } } if ( strcmp ( input , "d3f2" ) == 0 ) { for ( i = 0 ; i < 10 ; i ++) { SendDetour ( 0x10 , "bdd" , 43 , 4947 , 37112 ); SendDetour ( 0x10 , "bdd" , 43 , 5115 , 37024 ); SendDetour ( 0x10 , "bdd" , 43 , 5302 , 37141 ); SendDetour ( 0x10 , "bdd" , 43 , 5183 , 37259 ); } } if ( strcmp ( input , "d3f5" ) == 0 ) { for ( i = 0 ; i < 10 ; i ++) { SendDetour ( 0x10 , "bdd" , 43 , 21404 , 20838 ); SendDetour ( 0x10 , "bdd" , 43 , 21714 , 20827 ); SendDetour ( 0x10 , "bdd" , 43 , 21665 , 20602 ); SendDetour ( 0x10 , "bdd" , 43 , 21383 , 20533 ); } } if ( strcmp ( input , "d4f1" ) == 0 ) { for ( i = 0 ; i < 10 ; i ++) { SendDetour ( 0x10 , "bdd" , 43 , 34414 , 35576 ); SendDetour ( 0x10 , "bdd" , 43 , 34239 , 35652 ); SendDetour ( 0x10 , "bdd" , 43 , 34221 , 35516 ); } } if ( strcmp ( input , "d4f2" ) == 0 ) { for ( i = 0 ; i < 10 ; i ++) { SendDetour ( 0x10 , "bdd" , 43 , 18729 , 52449 ); SendDetour ( 0x10 , "bdd" , 43 , 18704 , 52151 ); SendDetour ( 0x10 , "bdd" , 43 , 19045 , 52273 ); SendDetour ( 0x10 , "bdd" , 43 , 18965 , 52510 ); } } /*######################################COMMANDS END#################################*/ if ( strcmp ( input , "commands" ) == 0 ) { printf ( "------------Command List-------------\n" ); printf ( "----Pimp Commands:\n" ); printf ( "ebit..revit...pimp\n" ); printf ( "----Fun Commands:\n" ); printf ( "S1/0 = Student Hack On Off\n" ); printf ( "D1/0 = Dance Hack On Off\n" ); printf ( "B1/0 = Beheade Hack On Off\n" ); printf ( "Animation1/0 Ani Hack On Off\n" ); printf ( "----Storm Commands\n" ); printf ( "d1r1..d1r8...d1r10\n" ); printf ( "d3f2...d3f5\n" ); printf ( "d4f1...d4f2\n" ); printf ( "---Crash Command\n" ); printf ( "crashmix\n" ); printf ( "How to Use\n" ); printf ( "crashmix=wear your armor wear your weapon unwar armor drop stone(pick it up oO)\n" ); printf ( "Storm Commands = you need Thunder Storm\n" ); printf ( "pimp = wear your Weapon unwear it drop your Tali..poli via skillbar press the number\n" ); } } } void Main () { IntDEBUG (); char bloodx [ 255 ]={ 0 }; sprintf_s ( bloodx , "EPVP KalHackIt v 2.0" ); SetConsoleTitleA ( bloodx ); farbe ( NORMAL ); printf ( "Credits: BakaBug,ZeroTen,Syntex,Bloodx\n" ); printf ( "write commands\n" ); Intercept ( INST_JMP , 0x004F2010 , ( DWORD ) SendDetour , 5 ); Intercept ( INST_JMP , 0x004F2121 , ( DWORD ) MyRecvDetour , 5 ); _beginthread ( start , 0 , NULL ); } //(c) by BakaBug void KHS () { BYTE Replacer = 0x85 ; DWORD Virutal_add = 0x00504DBF - 0x00104DBF ; MemcpyEx ( Virutal_add + 0x00104DBF ,( DWORD )& Replacer , 1 ); Replacer = 0x75 ; MemcpyEx ( Virutal_add + 0x00104F66 ,( DWORD )& Replacer , 1 ); MemcpyEx ( Virutal_add + 0x0010DB66 ,( DWORD )& Replacer , 1 ); Replacer = 0x61 ; MemcpyEx ( Virutal_add + 0x002A2A6D ,( DWORD )& Replacer , 1 ); } HINSTANCE hLThis = 0 ; HINSTANCE hL = 0 ; FARPROC p [ 332 ] = { 0 }; BOOL WINAPI DllMain ( HINSTANCE hInst , DWORD reason , LPVOID ) { if ( reason == DLL_PROCESS_ATTACH ) { hLThis = hInst ; char system [ MAX_PATH ]; GetSystemDirectoryA ( system , sizeof ( system )); strcat_s ( system , "\\winmm.dll" ); hL = LoadLibraryA ( system ); if (! hL ) return false ; KHS (); Main (); p [ 0 ] = GetProcAddress ( hL , "CloseDriver" ); p [ 1 ] = GetProcAddress ( hL , "DefDriverProc" ); p [ 2 ] = GetProcAddress ( hL , "DriverCallback" ); p [ 3 ] = GetProcAddress ( hL , "DrvGetModuleHandle" ); p [ 4 ] = GetProcAddress ( hL , "GetDriverModuleHandle" ); p [ 5 ] = GetProcAddress ( hL , "MigrateAllDrivers" ); p [ 6 ] = GetProcAddress ( hL , "MigrateSoundEvents" ); p [ 7 ] = GetProcAddress ( hL , "NotifyCallbackData" ); p [ 8 ] = GetProcAddress ( hL , "OpenDriver" ); p [ 9 ] = GetProcAddress ( hL , "PlaySound" ); p [ 10 ] = GetProcAddress ( hL , "PlaySoundA" ); p [ 11 ] = GetProcAddress ( hL , "PlaySoundW" ); p [ 12 ] = GetProcAddress ( hL , "SendDriverMessage" ); p [ 13 ] = GetProcAddress ( hL , "WOW32DriverCallback" ); p [ 14 ] = GetProcAddress ( hL , "WOW32ResolveMultiMediaHandle" ); p [ 15 ] = GetProcAddress ( hL , "WOWAppExit" ); p [ 16 ] = GetProcAddress ( hL , "WinmmLogoff" ); p [ 17 ] = GetProcAddress ( hL , "WinmmLogon" ); p [ 18 ] = GetProcAddress ( hL , "_gfxLogoff@0" ); p [ 19 ] = GetProcAddress ( hL , "_gfxLogon@4" ); p [ 20 ] = GetProcAddress ( hL , "aux32Message" ); p [ 21 ] = GetProcAddress ( hL , "auxGetDevCapsA" ); p [ 22 ] = GetProcAddress ( hL , "auxGetDevCapsW" ); p [ 23 ] = GetProcAddress ( hL , "auxGetNumDevs" ); p [ 24 ] = GetProcAddress ( hL , "auxGetVolume" ); p [ 25 ] = GetProcAddress ( hL , "auxOutMessage" ); p [ 26 ] = GetProcAddress ( hL , "auxSetVolume" ); p [ 27 ] = GetProcAddress ( hL , "gfxAddGfx" ); p [ 28 ] = GetProcAddress ( hL , "gfxBatchChange" ); p [ 29 ] = GetProcAddress ( hL , "gfxCreateGfxFactoriesList" ); p [ 30 ] = GetProcAddress ( hL , "gfxCreateZoneFactoriesList" ); p [ 31 ] = GetProcAddress ( hL , "gfxDestroyDeviceInterfaceList" ); p [ 32 ] = GetProcAddress ( hL , "gfxEnumerateGfxs" ); p [ 33 ] = GetProcAddress ( hL , "gfxModifyGfx" ); p [ 34 ] = GetProcAddress ( hL , "gfxOpenGfx" ); p [ 35 ] = GetProcAddress ( hL , "gfxRemoveGfx" ); p [ 36 ] = GetProcAddress ( hL , "joy32Message" ); p [ 37 ] = GetProcAddress ( hL , "joyConfigChanged" ); p [ 38 ] = GetProcAddress ( hL , "joyGetDevCapsA" ); p [ 39 ] = GetProcAddress ( hL , "joyGetDevCapsW" ); p [ 40 ] = GetProcAddress ( hL , "joyGetNumDevs" ); p [ 41 ] = GetProcAddress ( hL , "joyGetPos" ); p [ 42 ] = GetProcAddress ( hL , "joyGetPosEx" ); p [ 43 ] = GetProcAddress ( hL , "joyGetThreshold" ); p [ 44 ] = GetProcAddress ( hL , "joyReleaseCapture" ); p [ 45 ] = GetProcAddress ( hL , "joySetCapture" ); p [ 46 ] = GetProcAddress ( hL , "joySetThreshold" ); p [ 47 ] = GetProcAddress ( hL , "mci32Message" ); p [ 48 ] = GetProcAddress ( hL , "mciDriverNotify" ); p [ 49 ] = GetProcAddress ( hL , "mciDriverYield" ); p [ 50 ] = GetProcAddress ( hL , "mciExecute" ); p [ 51 ] = GetProcAddress ( hL , "mciFreeCommandResource" ); p [ 52 ] = GetProcAddress ( hL , "mciGetCreatorTask" ); p [ 53 ] = GetProcAddress ( hL , "mciGetDeviceIDA" ); p [ 54 ] = GetProcAddress ( hL , "mciGetDeviceIDFromElementIDA" ); p [ 55 ] = GetProcAddress ( hL , "mciGetDeviceIDFromElementIDW" ); p [ 56 ] = GetProcAddress ( hL , "mciGetDeviceIDW" ); p [ 57 ] = GetProcAddress ( hL , "mciGetDriverData" ); p [ 58 ] = GetProcAddress ( hL , "mciGetErrorStringA" ); p [ 59 ] = GetProcAddress ( hL , "mciGetErrorStringW" ); p [ 60 ] = GetProcAddress ( hL , "mciGetYieldProc" ); p [ 61 ] = GetProcAddress ( hL , "mciLoadCommandResource" ); p [ 62 ] = GetProcAddress ( hL , "mciSendCommandA" ); p [ 63 ] = GetProcAddress ( hL , "mciSendCommandW" ); p [ 64 ] = GetProcAddress ( hL , "mciSendStringA" ); p [ 65 ] = GetProcAddress ( hL , "mciSendStringW" ); p [ 66 ] = GetProcAddress ( hL , "mciSetDriverData" ); p [ 67 ] = GetProcAddress ( hL , "mciSetYieldProc" ); p [ 68 ] = GetProcAddress ( hL , "mid32Message" ); p [ 69 ] = GetProcAddress ( hL , "midiConnect" ); p [ 70 ] = GetProcAddress ( hL , "midiDisconnect" ); p [ 71 ] = GetProcAddress ( hL , "midiInAddBuffer" ); p [ 72 ] = GetProcAddress ( hL , "midiInClose" ); p [ 73 ] = GetProcAddress ( hL , "midiInGetDevCapsA" ); p [ 74 ] = GetProcAddress ( hL , "midiInGetDevCapsW" ); p [ 75 ] = GetProcAddress ( hL , "midiInGetErrorTextA" ); p [ 76 ] = GetProcAddress ( hL , "midiInGetErrorTextW" ); p [ 77 ] = GetProcAddress ( hL , "midiInGetID" ); p [ 78 ] = GetProcAddress ( hL , "midiInGetNumDevs" ); p [ 79 ] = GetProcAddress ( hL , "midiInMessage" ); p [ 80 ] = GetProcAddress ( hL , "midiInOpen" ); p [ 81 ] = GetProcAddress ( hL , "midiInPrepareHeader" ); p [ 82 ] = GetProcAddress ( hL , "midiInReset" ); p [ 83 ] = GetProcAddress ( hL , "midiInStart" ); p [ 84 ] = GetProcAddress ( hL , "midiInStop" ); p [ 85 ] = GetProcAddress ( hL , "midiInUnprepareHeader" ); p [ 86 ] = GetProcAddress ( hL , "midiOutCacheDrumPatches" ); p [ 87 ] = GetProcAddress ( hL , "midiOutCachePatches" ); p [ 88 ] = GetProcAddress ( hL , "midiOutClose" ); p [ 89 ] = GetProcAddress ( hL , "midiOutGetDevCapsA" ); p [ 90 ] = GetProcAddress ( hL , "midiOutGetDevCapsW" ); p [ 91 ] = GetProcAddress ( hL , "midiOutGetErrorTextA" ); p [ 92 ] = GetProcAddress ( hL , "midiOutGetErrorTextW" ); p [ 93 ] = GetProcAddress ( hL , "midiOutGetID" ); p [ 94 ] = GetProcAddress ( hL , "midiOutGetNumDevs" ); p [ 95 ] = GetProcAddress ( hL , "midiOutGetVolume" ); p [ 96 ] = GetProcAddress ( hL , "midiOutLongMsg" ); p [ 97 ] = GetProcAddress ( hL , "midiOutMessage" ); p [ 98 ] = GetProcAddress ( hL , "midiOutOpen" ); p [ 99 ] = GetProcAddress ( hL , "midiOutPrepareHeader" ); p [ 100 ] = GetProcAddress ( hL , "midiOutReset" ); p [ 101 ] = GetProcAddress ( hL , "midiOutSetVolume" ); p [ 102 ] = GetProcAddress ( hL , "midiOutShortMsg" ); p [ 103 ] = GetProcAddress ( hL , "midiOutUnprepareHeader" ); p [ 104 ] = GetProcAddress ( hL , "midiStreamClose" ); p [ 105 ] = GetProcAddress ( hL , "midiStreamOpen" ); p [ 106 ] = GetProcAddress ( hL , "midiStreamOut" ); p [ 107 ] = GetProcAddress ( hL , "midiStreamPause" ); p [ 108 ] = GetProcAddress ( hL , "midiStreamPosition" ); p [ 109 ] = GetProcAddress ( hL , "midiStreamProperty" ); p [ 110 ] = GetProcAddress ( hL , "midiStreamRestart" ); p [ 111 ] = GetProcAddress ( hL , "midiStreamStop" ); p [ 112 ] = GetProcAddress ( hL , "mixerClose" ); p [ 113 ] = GetProcAddress ( hL , "mixerGetControlDetailsA" ); p [ 114 ] = GetProcAddress ( hL , "mixerGetControlDetailsW" ); p [ 115 ] = GetProcAddress ( hL , "mixerGetDevCapsA" ); p [ 116 ] = GetProcAddress ( hL , "mixerGetDevCapsW" ); p [ 117 ] = GetProcAddress ( hL , "mixerGetID" ); p [ 118 ] = GetProcAddress ( hL , "mixerGetLineControlsA" ); p [ 119 ] = GetProcAddress ( hL , "mixerGetLineControlsW" ); p [ 120 ] = GetProcAddress ( hL , "mixerGetLineInfoA" ); p [ 121 ] = GetProcAddress ( hL , "mixerGetLineInfoW" ); p [ 122 ] = GetProcAddress ( hL , "mixerGetNumDevs" ); p [ 123 ] = GetProcAddress ( hL , "mixerMessage" ); p [ 124 ] = GetProcAddress ( hL , "mixerOpen" ); p [ 125 ] = GetProcAddress ( hL , "mixerSetControlDetails" ); p [ 126 ] = GetProcAddress ( hL , "mmDrvInstall" ); p [ 127 ] = GetProcAddress ( hL , "mmGetCurrentTask" ); p [ 128 ] = GetProcAddress ( hL , "mmTaskBlock" ); p [ 129 ] = GetProcAddress ( hL , "mmTaskCreate" ); p [ 130 ] = GetProcAddress ( hL , "mmTaskSignal" ); p [ 131 ] = GetProcAddress ( hL , "mmTaskYield" ); p [ 132 ] = GetProcAddress ( hL , "mmioAdvance" ); p [ 133 ] = GetProcAddress ( hL , "mmioAscend" ); p [ 134 ] = GetProcAddress ( hL , "mmioClose" ); p [ 135 ] = GetProcAddress ( hL , "mmioCreateChunk" ); p [ 136 ] = GetProcAddress ( hL , "mmioDescend" ); p [ 137 ] = GetProcAddress ( hL , "mmioFlush" ); p [ 138 ] = GetProcAddress ( hL , "mmioGetInfo" ); p [ 139 ] = GetProcAddress ( hL , "mmioInstallIOProcA" ); p [ 140 ] = GetProcAddress ( hL , "mmioInstallIOProcW" ); p [ 141 ] = GetProcAddress ( hL , "mmioOpenA" ); p [ 142 ] = GetProcAddress ( hL , "mmioOpenW" ); p [ 143 ] = GetProcAddress ( hL , "mmioRead" ); p [ 144 ] = GetProcAddress ( hL , "mmioRenameA" ); p [ 145 ] = GetProcAddress ( hL , "mmioRenameW" ); p [ 146 ] = GetProcAddress ( hL , "mmioSeek" ); p [ 147 ] = GetProcAddress ( hL , "mmioSendMessage" ); p [ 148 ] = GetProcAddress ( hL , "mmioSetBuffer" ); p [ 149 ] = GetProcAddress ( hL , "mmioSetInfo" ); p [ 150 ] = GetProcAddress ( hL , "mmioStringToFOURCCA" ); p [ 151 ] = GetProcAddress ( hL , "mmioStringToFOURCCW" ); p [ 152 ] = GetProcAddress ( hL , "mmioWrite" ); p [ 153 ] = GetProcAddress ( hL , "mmsystemGetVersion" ); p [ 154 ] = GetProcAddress ( hL , "mod32Message" ); p [ 155 ] = GetProcAddress ( hL , "mxd32Message" ); p [ 156 ] = GetProcAddress ( hL , "sndPlaySoundA" ); p [ 157 ] = GetProcAddress ( hL , "sndPlaySoundW" ); p [ 158 ] = GetProcAddress ( hL , "tid32Message" ); p [ 159 ] = GetProcAddress ( hL , "timeBeginPeriod" ); p [ 160 ] = GetProcAddress ( hL , "timeEndPeriod" ); p [ 161 ] = GetProcAddress ( hL , "timeGetDevCaps" ); p [ 162 ] = GetProcAddress ( hL , "timeGetSystemTime" ); p [ 163 ] = GetProcAddress ( hL , "timeGetTime" ); p [ 164 ] = GetProcAddress ( hL , "timeKillEvent" ); p [ 165 ] = GetProcAddress ( hL , "timeSetEvent" ); p [ 166 ] = GetProcAddress ( hL , "waveInAddBuffer" ); p [ 167 ] = GetProcAddress ( hL , "waveInClose" ); p [ 168 ] = GetProcAddress ( hL , "waveInGetDevCapsA" ); p [ 169 ] = GetProcAddress ( hL , "waveInGetDevCapsW" ); p [ 170 ] = GetProcAddress ( hL , "waveInGetErrorTextA" ); p [ 171 ] = GetProcAddress ( hL , "waveInGetErrorTextW" ); p [ 172 ] = GetProcAddress ( hL , "waveInGetID" ); p [ 173 ] = GetProcAddress ( hL , "waveInGetNumDevs" ); p [ 174 ] = GetProcAddress ( hL , "waveInGetPosition" ); p [ 175 ] = GetProcAddress ( hL , "waveInMessage" ); p [ 176 ] = GetProcAddress ( hL , "waveInOpen" ); p [ 177 ] = GetProcAddress ( hL , "waveInPrepareHeader" ); p [ 178 ] = GetProcAddress ( hL , "waveInReset" ); p [ 179 ] = GetProcAddress ( hL , "waveInStart" ); p [ 180 ] = GetProcAddress ( hL , "waveInStop" ); p [ 181 ] = GetProcAddress ( hL , "waveInUnprepareHeader" ); p [ 182 ] = GetProcAddress ( hL , "waveOutBreakLoop" ); p [ 183 ] = GetProcAddress ( hL , "waveOutClose" ); p [ 184 ] = GetProcAddress ( hL , "waveOutGetDevCapsA" ); p [ 185 ] = GetProcAddress ( hL , "waveOutGetDevCapsW" ); p [ 186 ] = GetProcAddress ( hL , "waveOutGetErrorTextA" ); p [ 187 ] = GetProcAddress ( hL , "waveOutGetErrorTextW" ); p [ 188 ] = GetProcAddress ( hL , "waveOutGetID" ); p [ 189 ] = GetProcAddress ( hL , "waveOutGetNumDevs" ); p [ 190 ] = GetProcAddress ( hL , "waveOutGetPitch" ); p [ 191 ] = GetProcAddress ( hL , "waveOutGetPlaybackRate" ); p [ 192 ] = GetProcAddress ( hL , "waveOutGetPosition" ); p [ 193 ] = GetProcAddress ( hL , "waveOutGetVolume" ); p [ 194 ] = GetProcAddress ( hL , "waveOutMessage" ); p [ 195 ] = GetProcAddress ( hL , "waveOutOpen" ); p [ 196 ] = GetProcAddress ( hL , "waveOutPause" ); p [ 197 ] = GetProcAddress ( hL , "waveOutPrepareHeader" ); p [ 198 ] = GetProcAddress ( hL , "waveOutReset" ); p [ 199 ] = GetProcAddress ( hL , "waveOutRestart" ); p [ 200 ] = GetProcAddress ( hL , "waveOutSetPitch" ); p [ 201 ] = GetProcAddress ( hL , "waveOutSetPlaybackRate" ); p [ 202 ] = GetProcAddress ( hL , "waveOutSetVolume" ); p [ 203 ] = GetProcAddress ( hL , "waveOutUnprepareHeader" ); p [ 204 ] = GetProcAddress ( hL , "waveOutWrite" ); p [ 205 ] = GetProcAddress ( hL , "wid32Message" ); p [ 206 ] = GetProcAddress ( hL , "winmmDbgOut" ); p [ 207 ] = GetProcAddress ( hL , "winmmSetDebugLevel" ); p [ 208 ] = GetProcAddress ( hL , "wod32Message" ); p [ 209 ] = GetProcAddress ( hL ,( LPCSTR ) "2" ); } if ( reason == DLL_PROCESS_DETACH ) { FreeLibrary ( hL ); MessageBoxA ( NULL , "Thanks for Using EPVP KalHackIt" , "Bye Bye" , 0 ); } return 1 ; } // CloseDriver extern "C" __declspec ( naked ) void __stdcall __E__0__ () { __asm { jmp p [ 0 * 4 ]; } } // DefDriverProc extern "C" __declspec ( naked ) void __stdcall __E__1__ () { __asm { jmp p [ 1 * 4 ]; } } // DriverCallback extern "C" __declspec ( naked ) void __stdcall __E__2__ () { __asm { jmp p [ 2 * 4 ]; } } // DrvGetModuleHandle extern "C" __declspec ( naked ) void __stdcall __E__3__ () { __asm { jmp p [ 3 * 4 ]; } } // GetDriverModuleHandle extern "C" __declspec ( naked ) void __stdcall __E__4__ () { __asm { jmp p [ 4 * 4 ]; } } // MigrateAllDrivers extern "C" __declspec ( naked ) void __stdcall __E__5__ () { __asm { jmp p [ 5 * 4 ]; } } // MigrateSoundEvents extern "C" __declspec ( naked ) void __stdcall __E__6__ () { __asm { jmp p [ 6 * 4 ]; } } // NotifyCallbackData extern "C" __declspec ( naked ) void __stdcall __E__7__ () { __asm { jmp p [ 7 * 4 ]; } } // OpenDriver extern "C" __declspec ( naked ) void __stdcall __E__8__ () { __asm { jmp p [ 8 * 4 ]; } } // PlaySound extern "C" __declspec ( naked ) void __stdcall __E__9__ () { __asm { jmp p [ 9 * 4 ]; } } // PlaySoundA extern "C" __declspec ( naked ) void __stdcall __E__10__ () { __asm { jmp p [ 10 * 4 ]; } } // PlaySoundW extern "C" __declspec ( naked ) void __stdcall __E__11__ () { __asm { jmp p [ 11 * 4 ]; } } // SendDriverMessage extern "C" __declspec ( naked ) void __stdcall __E__12__ () { __asm { jmp p [ 12 * 4 ]; } } // WOW32DriverCallback extern "C" __declspec ( naked ) void __stdcall __E__13__ () { __asm { jmp p [ 13 * 4 ]; } } // WOW32ResolveMultiMediaHandle extern "C" __declspec ( naked ) void __stdcall __E__14__ () { __asm { jmp p [ 14 * 4 ]; } } // WOWAppExit extern "C" __declspec ( naked ) void __stdcall __E__15__ () { __asm { jmp p [ 15 * 4 ]; } } // WinmmLogoff extern "C" __declspec ( naked ) void __stdcall __E__16__ () { __asm { jmp p [ 16 * 4 ]; } } // WinmmLogon extern "C" __declspec ( naked ) void __stdcall __E__17__ () { __asm { jmp p [ 17 * 4 ]; } } // _gfxLogoff@0 extern "C" __declspec ( naked ) void __stdcall __E__18__ () { __asm { jmp p [ 18 * 4 ]; } } // _gfxLogon@4 extern "C" __declspec ( naked ) void __stdcall __E__19__ () { __asm { jmp p [ 19 * 4 ]; } } // aux32Message extern "C" __declspec ( naked ) void __stdcall __E__20__ () { __asm { jmp p [ 20 * 4 ]; } } // auxGetDevCapsA extern "C" __declspec ( naked ) void __stdcall __E__21__ () { __asm { jmp p [ 21 * 4 ]; } } // auxGetDevCapsW extern "C" __declspec ( naked ) void __stdcall __E__22__ () { __asm { jmp p [ 22 * 4 ]; } } // auxGetNumDevs extern "C" __declspec ( naked ) void __stdcall __E__23__ () { __asm { jmp p [ 23 * 4 ]; } } // auxGetVolume extern "C" __declspec ( naked ) void __stdcall __E__24__ () { __asm { jmp p [ 24 * 4 ]; } } // auxOutMessage extern "C" __declspec ( naked ) void __stdcall __E__25__ () { __asm { jmp p [ 25 * 4 ]; } } // auxSetVolume extern "C" __declspec ( naked ) void __stdcall __E__26__ () { __asm { jmp p [ 26 * 4 ]; } } // gfxAddGfx extern "C" __declspec ( naked ) void __stdcall __E__27__ () { __asm { jmp p [ 27 * 4 ]; } } // gfxBatchChange extern "C" __declspec ( naked ) void __stdcall __E__28__ () { __asm { jmp p [ 28 * 4 ]; } } // gfxCreateGfxFactoriesList extern "C" __declspec ( naked ) void __stdcall __E__29__ () { __asm { jmp p [ 29 * 4 ]; } } // gfxCreateZoneFactoriesList extern "C" __declspec ( naked ) void __stdcall __E__30__ () { __asm { jmp p [ 30 * 4 ]; } } // gfxDestroyDeviceInterfaceList extern "C" __declspec ( naked ) void __stdcall __E__31__ () { __asm { jmp p [ 31 * 4 ]; } } // gfxEnumerateGfxs extern "C" __declspec ( naked ) void __stdcall __E__32__ () { __asm { jmp p [ 32 * 4 ]; } } // gfxModifyGfx extern "C" __declspec ( naked ) void __stdcall __E__33__ () { __asm { jmp p [ 33 * 4 ]; } } // gfxOpenGfx extern "C" __declspec ( naked ) void __stdcall __E__34__ () { __asm { jmp p [ 34 * 4 ]; } } // gfxRemoveGfx extern "C" __declspec ( naked ) void __stdcall __E__35__ () { __asm { jmp p [ 35 * 4 ]; } } // joy32Message extern "C" __declspec ( naked ) void __stdcall __E__36__ () { __asm { jmp p [ 36 * 4 ]; } } // joyConfigChanged extern "C" __declspec ( naked ) void __stdcall __E__37__ () { __asm { jmp p [ 37 * 4 ]; } } // joyGetDevCapsA extern "C" __declspec ( naked ) void __stdcall __E__38__ () { __asm { jmp p [ 38 * 4 ]; } } // joyGetDevCapsW extern "C" __declspec ( naked ) void __stdcall __E__39__ () { __asm { jmp p [ 39 * 4 ]; } } // joyGetNumDevs extern "C" __declspec ( naked ) void __stdcall __E__40__ () { __asm { jmp p [ 40 * 4 ]; } } // joyGetPos extern "C" __declspec ( naked ) void __stdcall __E__41__ () { __asm { jmp p [ 41 * 4 ]; } } // joyGetPosEx extern "C" __declspec ( naked ) void __stdcall __E__42__ () { __asm { jmp p [ 42 * 4 ]; } } // joyGetThreshold extern "C" __declspec ( naked ) void __stdcall __E__43__ () { __asm { jmp p [ 43 * 4 ]; } } // joyReleaseCapture extern "C" __declspec ( naked ) void __stdcall __E__44__ () { __asm { jmp p [ 44 * 4 ]; } } // joySetCapture extern "C" __declspec ( naked ) void __stdcall __E__45__ () { __asm { jmp p [ 45 * 4 ]; } } // joySetThreshold extern "C" __declspec ( naked ) void __stdcall __E__46__ () { __asm { jmp p [ 46 * 4 ]; } } // mci32Message extern "C" __declspec ( naked ) void __stdcall __E__47__ () { __asm { jmp p [ 47 * 4 ]; } } // mciDriverNotify extern "C" __declspec ( naked ) void __stdcall __E__48__ () { __asm { jmp p [ 48 * 4 ]; } } // mciDriverYield extern "C" __declspec ( naked ) void __stdcall __E__49__ () { __asm { jmp p [ 49 * 4 ]; } } // mciExecute extern "C" __declspec ( naked ) void __stdcall __E__50__ () { __asm { jmp p [ 50 * 4 ]; } } // mciFreeCommandResource extern "C" __declspec ( naked ) void __stdcall __E__51__ () { __asm { jmp p [ 51 * 4 ]; } } // mciGetCreatorTask extern "C" __declspec ( naked ) void __stdcall __E__52__ () { __asm { jmp p [ 52 * 4 ]; } } // mciGetDeviceIDA extern "C" __declspec ( naked ) void __stdcall __E__53__ () { __asm { jmp p [ 53 * 4 ]; } } // mciGetDeviceIDFromElementIDA extern "C" __declspec ( naked ) void __stdcall __E__54__ () { __asm { jmp p [ 54 * 4 ]; } } // mciGetDeviceIDFromElementIDW extern "C" __declspec ( naked ) void __stdcall __E__55__ () { __asm { jmp p [ 55 * 4 ]; } } // mciGetDeviceIDW extern "C" __declspec ( naked ) void __stdcall __E__56__ () { __asm { jmp p [ 56 * 4 ]; } } // mciGetDriverData extern "C" __declspec ( naked ) void __stdcall __E__57__ () { __asm { jmp p [ 57 * 4 ]; } } // mciGetErrorStringA extern "C" __declspec ( naked ) void __stdcall __E__58__ () { __asm { jmp p [ 58 * 4 ]; } } // mciGetErrorStringW extern "C" __declspec ( naked ) void __stdcall __E__59__ () { __asm { jmp p [ 59 * 4 ]; } } // mciGetYieldProc extern "C" __declspec ( naked ) void __stdcall __E__60__ () { __asm { jmp p [ 60 * 4 ]; } } // mciLoadCommandResource extern "C" __declspec ( naked ) void __stdcall __E__61__ () { __asm { jmp p [ 61 * 4 ]; } } // mciSendCommandA extern "C" __declspec ( naked ) void __stdcall __E__62__ () { __asm { jmp p [ 62 * 4 ]; } } // mciSendCommandW extern "C" __declspec ( naked ) void __stdcall __E__63__ () { __asm { jmp p [ 63 * 4 ]; } } // mciSendStringA extern "C" __declspec ( naked ) void __stdcall __E__64__ () { __asm { jmp p [ 64 * 4 ]; } } // mciSendStringW extern "C" __declspec ( naked ) void __stdcall __E__65__ () { __asm { jmp p [ 65 * 4 ]; } } // mciSetDriverData extern "C" __declspec ( naked ) void __stdcall __E__66__ () { __asm { jmp p [ 66 * 4 ]; } } // mciSetYieldProc extern "C" __declspec ( naked ) void __stdcall __E__67__ () { __asm { jmp p [ 67 * 4 ]; } } // mid32Message extern "C" __declspec ( naked ) void __stdcall __E__68__ () { __asm { jmp p [ 68 * 4 ]; } } // midiConnect extern "C" __declspec ( naked ) void __stdcall __E__69__ () { __asm { jmp p [ 69 * 4 ]; } } // midiDisconnect extern "C" __declspec ( naked ) void __stdcall __E__70__ () { __asm { jmp p [ 70 * 4 ]; } } // midiInAddBuffer extern "C" __declspec ( naked ) void __stdcall __E__71__ () { __asm { jmp p [ 71 * 4 ]; } } // midiInClose extern "C" __declspec ( naked ) void __stdcall __E__72__ () { __asm { jmp p [ 72 * 4 ]; } } // midiInGetDevCapsA extern "C" __declspec ( naked ) void __stdcall __E__73__ () { __asm { jmp p [ 73 * 4 ]; } } // midiInGetDevCapsW extern "C" __declspec ( naked ) void __stdcall __E__74__ () { __asm { jmp p [ 74 * 4 ]; } } // midiInGetErrorTextA extern "C" __declspec ( naked ) void __stdcall __E__75__ () { __asm { jmp p [ 75 * 4 ]; } } // midiInGetErrorTextW extern "C" __declspec ( naked ) void __stdcall __E__76__ () { __asm { jmp p [ 76 * 4 ]; } } // midiInGetID extern "C" __declspec ( naked ) void __stdcall __E__77__ () { __asm { jmp p [ 77 * 4 ]; } } // midiInGetNumDevs extern "C" __declspec ( naked ) void __stdcall __E__78__ () { __asm { jmp p [ 78 * 4 ]; } } // midiInMessage extern "C" __declspec ( naked ) void __stdcall __E__79__ () { __asm { jmp p [ 79 * 4 ]; } } // midiInOpen extern "C" __declspec ( naked ) void __stdcall __E__80__ () { __asm { jmp p [ 80 * 4 ]; } } // midiInPrepareHeader extern "C" __declspec ( naked ) void __stdcall __E__81__ () { __asm { jmp p [ 81 * 4 ]; } } // midiInReset extern "C" __declspec ( naked ) void __stdcall __E__82__ () { __asm { jmp p [ 82 * 4 ]; } } // midiInStart extern "C" __declspec ( naked ) void __stdcall __E__83__ () { __asm { jmp p [ 83 * 4 ]; } } // midiInStop extern "C" __declspec ( naked ) void __stdcall __E__84__ () { __asm { jmp p [ 84 * 4 ]; } } // midiInUnprepareHeader extern "C" __declspec ( naked ) void __stdcall __E__85__ () { __asm { jmp p [ 85 * 4 ]; } } // midiOutCacheDrumPatches extern "C" __declspec ( naked ) void __stdcall __E__86__ () { __asm { jmp p [ 86 * 4 ]; } } // midiOutCachePatches extern "C" __declspec ( naked ) void __stdcall __E__87__ () { __asm { jmp p [ 87 * 4 ]; } } // midiOutClose extern "C" __declspec ( naked ) void __stdcall __E__88__ () { __asm { jmp p [ 88 * 4 ]; } } // midiOutGetDevCapsA extern "C" __declspec ( naked ) void __stdcall __E__89__ () { __asm { jmp p [ 89 * 4 ]; } } // midiOutGetDevCapsW extern "C" __declspec ( naked ) void __stdcall __E__90__ () { __asm { jmp p [ 90 * 4 ]; } } // midiOutGetErrorTextA extern "C" __declspec ( naked ) void __stdcall __E__91__ () { __asm { jmp p [ 91 * 4 ]; } } // midiOutGetErrorTextW extern "C" __declspec ( naked ) void __stdcall __E__92__ () { __asm { jmp p [ 92 * 4 ]; } } // midiOutGetID extern "C" __declspec ( naked ) void __stdcall __E__93__ () { __asm { jmp p [ 93 * 4 ]; } } // midiOutGetNumDevs extern "C" __declspec ( naked ) void __stdcall __E__94__ () { __asm { jmp p [ 94 * 4 ]; } } // midiOutGetVolume extern "C" __declspec ( naked ) void __stdcall __E__95__ () { __asm { jmp p [ 95 * 4 ]; } } // midiOutLongMsg extern "C" __declspec ( naked ) void __stdcall __E__96__ () { __asm { jmp p [ 96 * 4 ]; } } // midiOutMessage extern "C" __declspec ( naked ) void __stdcall __E__97__ () { __asm { jmp p [ 97 * 4 ]; } } // midiOutOpen extern "C" __declspec ( naked ) void __stdcall __E__98__ () { __asm { jmp p [ 98 * 4 ]; } } // midiOutPrepareHeader extern "C" __declspec ( naked ) void __stdcall __E__99__ () { __asm { jmp p [ 99 * 4 ]; } } // midiOutReset extern "C" __declspec ( naked ) void __stdcall __E__100__ () { __asm { jmp p [ 100 * 4 ]; } } // midiOutSetVolume extern "C" __declspec ( naked ) void __stdcall __E__101__ () { __asm { jmp p [ 101 * 4 ]; } } // midiOutShortMsg extern "C" __declspec ( naked ) void __stdcall __E__102__ () { __asm { jmp p [ 102 * 4 ]; } } // midiOutUnprepareHeader extern "C" __declspec ( naked ) void __stdcall __E__103__ () { __asm { jmp p [ 103 * 4 ]; } } // midiStreamClose extern "C" __declspec ( naked ) void __stdcall __E__104__ () { __asm { jmp p [ 104 * 4 ]; } } // midiStreamOpen extern "C" __declspec ( naked ) void __stdcall __E__105__ () { __asm { jmp p [ 105 * 4 ]; } } // midiStreamOut extern "C" __declspec ( naked ) void __stdcall __E__106__ () { __asm { jmp p [ 106 * 4 ]; } } // midiStreamPause extern "C" __declspec ( naked ) void __stdcall __E__107__ () { __asm { jmp p [ 107 * 4 ]; } } // midiStreamPosition extern "C" __declspec ( naked ) void __stdcall __E__108__ () { __asm { jmp p [ 108 * 4 ]; } } // midiStreamProperty extern "C" __declspec ( naked ) void __stdcall __E__109__ () { __asm { jmp p [ 109 * 4 ]; } } // midiStreamRestart extern "C" __declspec ( naked ) void __stdcall __E__110__ () { __asm { jmp p [ 110 * 4 ]; } } // midiStreamStop extern "C" __declspec ( naked ) void __stdcall __E__111__ () { __asm { jmp p [ 111 * 4 ]; } } // mixerClose extern "C" __declspec ( naked ) void __stdcall __E__112__ () { __asm { jmp p [ 112 * 4 ]; } } // mixerGetControlDetailsA extern "C" __declspec ( naked ) void __stdcall __E__113__ () { __asm { jmp p [ 113 * 4 ]; } } // mixerGetControlDetailsW extern "C" __declspec ( naked ) void __stdcall __E__114__ () { __asm { jmp p [ 114 * 4 ]; } } // mixerGetDevCapsA extern "C" __declspec ( naked ) void __stdcall __E__115__ () { __asm { jmp p [ 115 * 4 ]; } } // mixerGetDevCapsW extern "C" __declspec ( naked ) void __stdcall __E__116__ () { __asm { jmp p [ 116 * 4 ]; } } // mixerGetID extern "C" __declspec ( naked ) void __stdcall __E__117__ () { __asm { jmp p [ 117 * 4 ]; } } // mixerGetLineControlsA extern "C" __declspec ( naked ) void __stdcall __E__118__ () { __asm { jmp p [ 118 * 4 ]; } } // mixerGetLineControlsW extern "C" __declspec ( naked ) void __stdcall __E__119__ () { __asm { jmp p [ 119 * 4 ]; } } // mixerGetLineInfoA extern "C" __declspec ( naked ) void __stdcall __E__120__ () { __asm { jmp p [ 120 * 4 ]; } } // mixerGetLineInfoW extern "C" __declspec ( naked ) void __stdcall __E__121__ () { __asm { jmp p [ 121 * 4 ]; } } // mixerGetNumDevs extern "C" __declspec ( naked ) void __stdcall __E__122__ () { __asm { jmp p [ 122 * 4 ]; } } // mixerMessage extern "C" __declspec ( naked ) void __stdcall __E__123__ () { __asm { jmp p [ 123 * 4 ]; } } // mixerOpen extern "C" __declspec ( naked ) void __stdcall __E__124__ () { __asm { jmp p [ 124 * 4 ]; } } // mixerSetControlDetails extern "C" __declspec ( naked ) void __stdcall __E__125__ () { __asm { jmp p [ 125 * 4 ]; } } // mmDrvInstall extern "C" __declspec ( naked ) void __stdcall __E__126__ () { __asm { jmp p [ 126 * 4 ]; } } // mmGetCurrentTask extern "C" __declspec ( naked ) void __stdcall __E__127__ () { __asm { jmp p [ 127 * 4 ]; } } // mmTaskBlock extern "C" __declspec ( naked ) void __stdcall __E__128__ () { __asm { jmp p [ 128 * 4 ]; } } // mmTaskCreate extern "C" __declspec ( naked ) void __stdcall __E__129__ () { __asm { jmp p [ 129 * 4 ]; } } // mmTaskSignal extern "C" __declspec ( naked ) void __stdcall __E__130__ () { __asm { jmp p [ 130 * 4 ]; } } // mmTaskYield extern "C" __declspec ( naked ) void __stdcall __E__131__ () { __asm { jmp p [ 131 * 4 ]; } } // mmioAdvance extern "C" __declspec ( naked ) void __stdcall __E__132__ () { __asm { jmp p [ 132 * 4 ]; } } // mmioAscend extern "C" __declspec ( naked ) void __stdcall __E__133__ () { __asm { jmp p [ 133 * 4 ]; } } // mmioClose extern "C" __declspec ( naked ) void __stdcall __E__134__ () { __asm { jmp p [ 134 * 4 ]; } } // mmioCreateChunk extern "C" __declspec ( naked ) void __stdcall __E__135__ () { __asm { jmp p [ 135 * 4 ]; } } // mmioDescend extern "C" __declspec ( naked ) void __stdcall __E__136__ () { __asm { jmp p [ 136 * 4 ]; } } // mmioFlush extern "C" __declspec ( naked ) void __stdcall __E__137__ () { __asm { jmp p [ 137 * 4 ]; } } // mmioGetInfo extern "C" __declspec ( naked ) void __stdcall __E__138__ () { __asm { jmp p [ 138 * 4 ]; } } // mmioInstallIOProcA extern "C" __declspec ( naked ) void __stdcall __E__139__ () { __asm { jmp p [ 139 * 4 ]; } } // mmioInstallIOProcW extern "C" __declspec ( naked ) void __stdcall __E__140__ () { __asm { jmp p [ 140 * 4 ]; } } // mmioOpenA extern "C" __declspec ( naked ) void __stdcall __E__141__ () { __asm { jmp p [ 141 * 4 ]; } } // mmioOpenW extern "C" __declspec ( naked ) void __stdcall __E__142__ () { __asm { jmp p [ 142 * 4 ]; } } // mmioRead extern "C" __declspec ( naked ) void __stdcall __E__143__ () { __asm { jmp p [ 143 * 4 ]; } } // mmioRenameA extern "C" __declspec ( naked ) void __stdcall __E__144__ () { __asm { jmp p [ 144 * 4 ]; } } // mmioRenameW extern "C" __declspec ( naked ) void __stdcall __E__145__ () { __asm { jmp p [ 145 * 4 ]; } } // mmioSeek extern "C" __declspec ( naked ) void __stdcall __E__146__ () { __asm { jmp p [ 146 * 4 ]; } } // mmioSendMessage extern "C" __declspec ( naked ) void __stdcall __E__147__ () { __asm { jmp p [ 147 * 4 ]; } } // mmioSetBuffer extern "C" __declspec ( naked ) void __stdcall __E__148__ () { __asm { jmp p [ 148 * 4 ]; } } // mmioSetInfo extern "C" __declspec ( naked ) void __stdcall __E__149__ () { __asm { jmp p [ 149 * 4 ]; } } // mmioStringToFOURCCA extern "C" __declspec ( naked ) void __stdcall __E__150__ () { __asm { jmp p [ 150 * 4 ]; } } // mmioStringToFOURCCW extern "C" __declspec ( naked ) void __stdcall __E__151__ () { __asm { jmp p [ 151 * 4 ]; } } // mmioWrite extern "C" __declspec ( naked ) void __stdcall __E__152__ () { __asm { jmp p [ 152 * 4 ]; } } // mmsystemGetVersion extern "C" __declspec ( naked ) void __stdcall __E__153__ () { __asm { jmp p [ 153 * 4 ]; } } // mod32Message extern "C" __declspec ( naked ) void __stdcall __E__154__ () { __asm { jmp p [ 154 * 4 ]; } } // mxd32Message extern "C" __declspec ( naked ) void __stdcall __E__155__ () { __asm { jmp p [ 155 * 4 ]; } } // sndPlaySoundA extern "C" __declspec ( naked ) void __stdcall __E__156__ () { __asm { jmp p [ 156 * 4 ]; } } // sndPlaySoundW extern "C" __declspec ( naked ) void __stdcall __E__157__ () { __asm { jmp p [ 157 * 4 ]; } } // tid32Message extern "C" __declspec ( naked ) void __stdcall __E__158__ () { __asm { jmp p [ 158 * 4 ]; } } // timeBeginPeriod extern "C" __declspec ( naked ) void __stdcall __E__159__ () { __asm { jmp p [ 159 * 4 ]; } } // timeEndPeriod extern "C" __declspec ( naked ) void __stdcall __E__160__ () { __asm { jmp p [ 160 * 4 ]; } } // timeGetDevCaps extern "C" __declspec ( naked ) void __stdcall __E__161__ () { __asm { jmp p [ 161 * 4 ]; } } // timeGetSystemTime extern "C" __declspec ( naked ) void __stdcall __E__162__ () { __asm { jmp p [ 162 * 4 ]; } } // timeGetTime extern "C" __declspec ( naked ) void __stdcall __E__163__ () { __asm { jmp p [ 163 * 4 ]; } } // timeKillEvent extern "C" __declspec ( naked ) void __stdcall __E__164__ () { __asm { jmp p [ 164 * 4 ]; } } // timeSetEvent extern "C" __declspec ( naked ) void __stdcall __E__165__ () { __asm { jmp p [ 165 * 4 ]; } } // waveInAddBuffer extern "C" __declspec ( naked ) void __stdcall __E__166__ () { __asm { jmp p [ 166 * 4 ]; } } // waveInClose extern "C" __declspec ( naked ) void __stdcall __E__167__ () { __asm { jmp p [ 167 * 4 ]; } } // waveInGetDevCapsA extern "C" __declspec ( naked ) void __stdcall __E__168__ () { __asm { jmp p [ 168 * 4 ]; } } // waveInGetDevCapsW extern "C" __declspec ( naked ) void __stdcall __E__169__ () { __asm { jmp p [ 169 * 4 ]; } } // waveInGetErrorTextA extern "C" __declspec ( naked ) void __stdcall __E__170__ () { __asm { jmp p [ 170 * 4 ]; } } // waveInGetErrorTextW extern "C" __declspec ( naked ) void __stdcall __E__171__ () { __asm { jmp p [ 171 * 4 ]; } } // waveInGetID extern "C" __declspec ( naked ) void __stdcall __E__172__ () { __asm { jmp p [ 172 * 4 ]; } } // waveInGetNumDevs extern "C" __declspec ( naked ) void __stdcall __E__173__ () { __asm { jmp p [ 173 * 4 ]; } } // waveInGetPosition extern "C" __declspec ( naked ) void __stdcall __E__174__ () { __asm { jmp p [ 174 * 4 ]; } } // waveInMessage extern "C" __declspec ( naked ) void __stdcall __E__175__ () { __asm { jmp p [ 175 * 4 ]; } } // waveInOpen extern "C" __declspec ( naked ) void __stdcall __E__176__ () { __asm { jmp p [ 176 * 4 ]; } } // waveInPrepareHeader extern "C" __declspec ( naked ) void __stdcall __E__177__ () { __asm { jmp p [ 177 * 4 ]; } } // waveInReset extern "C" __declspec ( naked ) void __stdcall __E__178__ () { __asm { jmp p [ 178 * 4 ]; } } // waveInStart extern "C" __declspec ( naked ) void __stdcall __E__179__ () { __asm { jmp p [ 179 * 4 ]; } } // waveInStop extern "C" __declspec ( naked ) void __stdcall __E__180__ () { __asm { jmp p [ 180 * 4 ]; } } // waveInUnprepareHeader extern "C" __declspec ( naked ) void __stdcall __E__181__ () { __asm { jmp p [ 181 * 4 ]; } } // waveOutBreakLoop extern "C" __declspec ( naked ) void __stdcall __E__182__ () { __asm { jmp p [ 182 * 4 ]; } } // waveOutClose extern "C" __declspec ( naked ) void __stdcall __E__183__ () { __asm { jmp p [ 183 * 4 ]; } } // waveOutGetDevCapsA extern "C" __declspec ( naked ) void __stdcall __E__184__ () { __asm { jmp p [ 184 * 4 ]; } } // waveOutGetDevCapsW extern "C" __declspec ( naked ) void __stdcall __E__185__ () { __asm { jmp p [ 185 * 4 ]; } } // waveOutGetErrorTextA extern "C" __declspec ( naked ) void __stdcall __E__186__ () { __asm { jmp p [ 186 * 4 ]; } } // waveOutGetErrorTextW extern "C" __declspec ( naked ) void __stdcall __E__187__ () { __asm { jmp p [ 187 * 4 ]; } } // waveOutGetID extern "C" __declspec ( naked ) void __stdcall __E__188__ () { __asm { jmp p [ 188 * 4 ]; } } // waveOutGetNumDevs extern "C" __declspec ( naked ) void __stdcall __E__189__ () { __asm { jmp p [ 189 * 4 ]; } } // waveOutGetPitch extern "C" __declspec ( naked ) void __stdcall __E__190__ () { __asm { jmp p [ 190 * 4 ]; } } // waveOutGetPlaybackRate extern "C" __declspec ( naked ) void __stdcall __E__191__ () { __asm { jmp p [ 191 * 4 ]; } } // waveOutGetPosition extern "C" __declspec ( naked ) void __stdcall __E__192__ () { __asm { jmp p [ 192 * 4 ]; } } // waveOutGetVolume extern "C" __declspec ( naked ) void __stdcall __E__193__ () { __asm { jmp p [ 193 * 4 ]; } } // waveOutMessage extern "C" __declspec ( naked ) void __stdcall __E__194__ () { __asm { jmp p [ 194 * 4 ]; } } // waveOutOpen extern "C" __declspec ( naked ) void __stdcall __E__195__ () { __asm { jmp p [ 195 * 4 ]; } } // waveOutPause extern "C" __declspec ( naked ) void __stdcall __E__196__ () { __asm { jmp p [ 196 * 4 ]; } } // waveOutPrepareHeader extern "C" __declspec ( naked ) void __stdcall __E__197__ () { __asm { jmp p [ 197 * 4 ]; } } // waveOutReset extern "C" __declspec ( naked ) void __stdcall __E__198__ () { __asm { jmp p [ 198 * 4 ]; } } // waveOutRestart extern "C" __declspec ( naked ) void __stdcall __E__199__ () { __asm { jmp p [ 199 * 4 ]; } } // waveOutSetPitch extern "C" __declspec ( naked ) void __stdcall __E__200__ () { __asm { jmp p [ 200 * 4 ]; } } // waveOutSetPlaybackRate extern "C" __declspec ( naked ) void __stdcall __E__201__ () { __asm { jmp p [ 201 * 4 ]; } } // waveOutSetVolume extern "C" __declspec ( naked ) void __stdcall __E__202__ () { __asm { jmp p [ 202 * 4 ]; } } // waveOutUnprepareHeader extern "C" __declspec ( naked ) void __stdcall __E__203__ () { __asm { jmp p [ 203 * 4 ]; } } // waveOutWrite extern "C" __declspec ( naked ) void __stdcall __E__204__ () { __asm { jmp p [ 204 * 4 ]; } } // wid32Message extern "C" __declspec ( naked ) void __stdcall __E__205__ () { __asm { jmp p [ 205 * 4 ]; } } // winmmDbgOut extern "C" __declspec ( naked ) void __stdcall __E__206__ () { __asm { jmp p [ 206 * 4 ]; } } // winmmSetDebugLevel extern "C" __declspec ( naked ) void __stdcall __E__207__ () { __asm { jmp p [ 207 * 4 ]; } } // wod32Message extern "C" __declspec ( naked ) void __stdcall __E__208__ () { __asm { jmp p [ 208 * 4 ]; } } // ___XXX___210 extern "C" __declspec ( naked ) void __stdcall __E__209__ () { __asm { jmp p [ 209 * 4 ]; } }
Stuff.h
PHP Code:
#pragma once #include <math.h> #include <iostream> #include <fstream> #include <stdio.h> #include <fcntl.h> /* for _O_TEXT and _O_BINARY */ #include <io.h> #include <process.h> #include <windows.h> #define ASM void __declspec(naked) #define EXPORT __declspec(dllexport) __cdecl #define THREAD DWORD WINAPI #define Naked __declspec( naked ) #define INST_NOP 0x90 #define INST_CALL 0xe8 #define INST_JMP 0xe9 #define INST_BYTE 0x00 #define SHORT_JZ 0x74 void farbe ( WORD color ) { SetConsoleTextAttribute (:: GetStdHandle ( STD_OUTPUT_HANDLE ), color ); } #define BLAU 0x0001 #define GRUEN 0x0002 #define ROT 0x0004 #define NORMAL 0x0007 #define HELLBLAU 0x0009 #define GELB 0x000e #define BG_BLAU_ROT 0x00014 #define BG_BLAU_NORMAL 0x00017 #define BG_GELB_SCHWARZ 0x000e0 //Farben done int SendDetour ( DWORD type , LPCSTR format ,...); void IntDEBUG () { int hCrtIn , hCrtOut ; FILE * conIn , * conOut ; AllocConsole (); hCrtIn = _open_osfhandle (( intptr_t ) GetStdHandle ( STD_INPUT_HANDLE ), _O_TEXT ); hCrtOut = _open_osfhandle (( intptr_t ) GetStdHandle ( STD_OUTPUT_HANDLE ), _O_TEXT ); conIn = _fdopen ( hCrtIn , "r" ); conOut = _fdopen ( hCrtOut , "w" ); * stdin = * conIn ; * stdout = * conOut ; } LPVOID MemcpyEx ( DWORD lpDest , DWORD lpSource , int len ) { DWORD oldSourceProt , oldDestProt = 0 ; VirtualProtect (( LPVOID ) lpSource , len , PAGE_EXECUTE_READWRITE ,& oldSourceProt ); VirtualProtect (( LPVOID ) lpDest , len , PAGE_EXECUTE_READWRITE ,& oldDestProt ); memcpy (( void *) lpDest ,( void *) lpSource , len ); VirtualProtect (( LPVOID ) lpDest , len , oldDestProt ,& oldDestProt ); VirtualProtect (( LPVOID ) lpSource , len , oldSourceProt ,& oldSourceProt ); return ( LPVOID ) lpDest ; }; DWORD Intercept ( int instruction , DWORD lpSource , DWORD lpDest , int len ) { // if(!lpDest || !lpSource || len <= 4) //ich brauch auch 2bytes // return FALSE; //lpDest = neu_adresse for SHOT_JZ DWORD realtarget ; LPBYTE buffer = new BYTE [ len ]; memset ( buffer , 0x90 , len ); //Fill out with nops if ( instruction != INST_NOP && len >= 5 ) { buffer [( len - 5 )] = instruction ; //Set the start of the call @ the end //so we can return normally if the code is unpatched (unhook patches while patchfunction is running) DWORD dwJMP = ( DWORD ) lpDest - ( lpSource + 5 + ( len - 5 )); memcpy (& realtarget ,( void *)( lpSource + 1 ), 4 ); realtarget = realtarget + lpSource + 5 ; memcpy ( buffer + 1 + ( len - 5 ),& dwJMP , 4 ); } if ( instruction == SHORT_JZ ) { buffer [ 0 ]= instruction ; buffer [ 1 ]=( BYTE ) lpDest ; } if ( instruction == INST_BYTE ) { buffer [ 0 ]=( BYTE ) lpDest ; } MemcpyEx ( lpSource , ( DWORD ) buffer , len ); // Call to intercept delete [] buffer ; return realtarget ; } struct SPlayer { DWORD PID ; DWORD X ; DWORD Y ; DWORD Z ; BYTE Classe ; char name [ 255 ]; }; SPlayer Player [ 500 ]={ 0 }; struct SItem { DWORD Item ; DWORD X ; DWORD Y ; DWORD Z ; }; SItem Item [ 500 ]={ 0 }; struct SMob { DWORD MID ; DWORD X ; DWORD Y ; DWORD Z ; BYTE Classe ; DWORD HP ; }; SMob Mob [ 500 ]={ 0 }; using namespace std ;
Similar Threads
Release: KalOnline PacketHack (Proxy-DLL) Source Code.
01/06/2011 - Kal Hacks, Bots, Cheats & Exploits - 29 Replies
Aloah, Community.
Bevor ich jetzt einiges schreiben werde, ist folgendes notwendig.
Ich habe die Funktion "SearchPattern()" von BakaBug benutzt. Ebenso das Code-Snippet (memcpy(...)) von BakaBug's Source Code. Deshalb gelten - wenn, dann - Credits an/für/zu BakaBug.
Mir egal, was ihr damit macht. Momentan funktioniert diese Proxy-DLL. Zumindest mit dem, womit diese "ausgestattet" ist.
Anmerkungen:
- Nein, es ist kein Bot.
help whit packethack
05/07/2008 - Lineage 2 - 3 Replies
so...i'm seeking for someone that would like to colaborate whit me to find out all or most of the functions packethack can offer...some of u will say that phx is dead...but i know a srv...a good srv...where it works...but i dont know all the tricks...so if any wan will want to colaborate whit me...just leave the msn/yahoo here...btw srv is c6...
All times are GMT +2. The time now is 12:39 .